Nightfall community pilot privacy

Updated 11 October 2026. Operated by Members.io. Contact support@membersdotio.com.

Dark mode

Appearance settings stay in your browser. Community participation is optional. We do not collect browsing history or website contents for claims.

Optional verification

Google sign-in supplies a signed identity token. Our server verifies it and retains a SHA-256 hash of the Google account identifier, your public wallet address, installation public-key fingerprint, and registration time to prevent repeated claims. We do not retain your email address, profile picture, name or raw Google identity token.

The extension creates an installation signing key locally and shares its public key and a challenge signature only when you open the claim pilot. The opt-in session lasts 10 minutes; verification challenges expire after five minutes. Unfinished challenges are cleaned up as new requests arrive.

Hosting and public blockchain

Vercel hosts the website and service; Supabase stores registrations, pending claims and publisher records. These providers may process operational metadata under their own policies. The service uses short-lived hashed IP identifiers for request limits, retained for up to one hour while active cleanup runs. We do not send claim data to advertising services.

Your wallet address, token transfers and blockchain balances are public on Base Sepolia. Public blockchain records cannot be erased. The publisher pays test gas for eligible claims within daily limits.

Retention and choices

Registration hashes and wallet links are retained for the life of the pilot to prevent repeat claims. Removing the extension or disconnecting Google does not erase an existing registration. You may request review or deletion of off-chain data through support; deletion cannot erase blockchain records or guarantee a fresh allocation. Backups may retain earlier records until their retention period ends. Do not send seed phrases or private keys.

We will update this notice before materially changing collection or use. The current service handles test tokens only.